Cyber attack early warning system

Abstract

An early warning system and method for generating an alert regarding a potential attack on a client device is provided for based on real-time analysis. The early warning system and method generally comprise receiving data associated with an attack alert, wherein the attack alert corresponds to an electrical signal that indicates detection of a malware attack from a remote source. The received data is analyzed using an attack-specific engine that is configured to generate an attack-specific result. An attack value is computed based on the attack-specific result and a consideration of potential attack targets, wherein the attack value is compared to a threshold value so as to determine whether or not to generate an early warning alert. An early warning alert is generated when the attack value matches or exceeds the threshold value.

Description

FIELD[0001]Embodiments of the disclosure relate to the field of cyber-security. More specifically, one embodiment of the disclosure relates to a system, apparatus and method for providing an early warning of a potential attack on a client device based on real-time analysis.GENERAL BACKGROUND[0002]Over the last decade, malicious software has become a pervasive problem for Internet users as many networked resources include vulnerabilities that are subject to attack. For instance, over the past few years, an increasing number of vulnerabilities are being discovered in software that is loaded onto network devices, such as vulnerabilities within operating systems, for example. While some vulnerabilities continue to be addressed through software patches, prior to the release of such software patches, network devices will continue to be targeted for attack by malware, namely information such as computer code that attempts during execution to take advantage of a vulnerability in computer so...

AI Technical Summary

Benefits of technology

The patent describes a system for predicting and preventing malicious attacks on computer devices. The system analyzes network traffic in real-time to detect potential malware attacks. When a potential attack is detected, the system alerts the user and provides further analysis of the attack to determine its type and potential targets. This early warning system can prevent attacks from occurring and is designed to be proactive, rather than reactive after the fact. Overall, the system improves cyber security by identifying and predicting potential malware attacks in advance.

Problems solved by technology

Over the last decade, malicious software has become a pervasive problem for Internet users as many networked resources include vulnerabilities that are subject to attack.

While some vulnerabilities continue to be addressed through software patches, prior to the release of such software patches, network devices will continue to be targeted for attack by malware, namely information such as computer code that attempts during execution to take advantage of a vulnerability in computer software by acquiring sensitive information or adversely influencing or attacking normal operations of the network device or the entire enterprise network.

Unfortunately, users are at the mercy of the most recent update of their anti-virus software, which may or may not include information to prevent possible malware exploits.

Furthermore, modern malware is becoming increasingly targeted, such that particular users, industries, or even specific segments are being sought, thereby circumventing even the most recently updated and detailed security measures that are usually generic in nature.

The issue is further exacerbated because malware is also becoming increasingly sophisticated, to the point that such malware may go undetected by anti-virus software, or go so far as circumventing anti-virus measures altogether.

Images